[Git][security-tracker-team/security-tracker][master] Update information for CVE-2022-23901/re2c

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15c5944f by Salvatore Bonaccorso at 2022-03-30T21:31:28+02:00
Update information for CVE-2022-23901/re2c

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12181,10 +12181,11 @@ CVE-2022-23903 (A Cross Site Scripting (XSS) vulnerability exists in pearadmin p
 CVE-2022-23902 (Tongda2000 v11.10 was discovered to contain a SQL injection vulnerabil ...)
 	NOT-FOR-US: Tongda2000
 CVE-2022-23901 (A stack overflow re2c 2.2 exists due to infinite recursion issues in s ...)
-	- re2c 3.0-1
+	- re2c 3.0-1 (unimportant)
 	NOTE: https://github.com/skvadrik/re2c/issues/394
 	NOTE: https://github.com/skvadrik/re2c/commit/a3473fd7be829cb33907cb08612f955133c70a96 (3.0)
 	NOTE: https://github.com/skvadrik/re2c/commit/039c18949190c5de5397eba504d2c75dad2ea9ca (3.0)
+	NOTE: Crash im CLI tool, no security impact
 CVE-2022-23900
 	RESERVED
 CVE-2022-23899 (MCMS v5.2.5 was discovered to contain a SQL injection vulnerability vi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15c5944f4c7dde0c7ac660bbe8b32b4b866588c7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15c5944f4c7dde0c7ac660bbe8b32b4b866588c7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220330/1cefd554/attachment.htm>